Access Certification Revocation

[William3squivel]

We are running our user manager campaign and realized that during the revocation process we are seeing real time access being revoked when a manager completes/ locks their certifications. Is there an option or setting to not have real time revocations to occur and only have revocation tickets generated after the campaign is locked or expired? 

[pruthvi_t]

Hi @William3squivel ,

When you choose the config to create revoke tasks for items revoked by manager when completed certification, the revoke access tasks are created. Then the provisioning job will pick the tasks and revoke the accesses.

As per my understanding, you do not want the access to be revoked. In order to do that you have to disable the creation of revoke tasks from campaign configuration.

However, can you please elaborate on the generation of tickets for revocation. Because we can only create tasks which will be picked by WSRETRY job to process them.

For more information on configurations for user manager campaign, please refer to below documentation link.

https://docs.saviyntcloud.com/bundle/EIC-Admin-v2021x/page/Content/Chapter06-EIC-Configurations/Conf...

Thanks,

[dgandhi]

You will have to turn off below setting if you dont have revoke task to be generated on locking the campaign.

Thanks